implemented complete restful user management interface including functional tests. this enables basic user operation. note that only admins are allowed to create, edit, destroy other users

1 files changed, 29 insertions, 1 deletions

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 19f6b2d..b15f83b 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -3,29 +3,57 @@ class UsersController < ApplicationController
   # Private
   
   before_filter :login_required
+  before_filter :verify_admin_status, :except => [:index, :show]
   
   layout 'admin'
   
   def index
-    @users = User.all
+    @users = User.all(:order => "login ASC")
   end
 
   def new
+    @user = User.new( params[:user] )
   end
 
   def create
+    @user = User.new params[:user]
+    
+    if @user.save
+      redirect_to user_path(@user)
+    else
+      render :new
+    end
   end
 
   def edit
+    @user = User.find(params[:id])
   end
 
   def update
+    @user = User.find(params[:id])
+    
+    if @user.update_attributes(params[:user])
+      redirect_to user_path(@user)
+    else
+      render :edit
+    end
   end
 
   def show
+    @user = User.find(params[:id])
   end
 
   def destroy
+    user = User.find(params[:id])
+    user.destroy if user
+    redirect_to users_path
   end
 
+  private
+    def verify_admin_status
+      unless current_user.admin
+        flash[:notice] = "Sorry, you need to be an admin for this action"
+        redirect_to users_path
+      end
+    end
 end